Shenandoah Valley Medical System, Inc.

Shenandoah Valley Medical System, Inc. (d/b/a Shenandoah Community Health) issued a Massachusetts state-agency breach notification (Ref: 2026-1335). The incident involved unauthorized access to minor's information, including Social Security numbers and dates of birth. The organization provided free credit monitoring and fraud assistance via Cyberscout/TransUnion and established a toll-free response line. Specific details regarding the attack vector, discovery date, and exact number of affected individuals are not disclosed in this filing.

Shenandoah Valley Medical System, Inc. reported a data security incident involving its business associate, Aesto LLC d/b/a Aesto Health. Unauthorized access to a limited portion of Aesto's AWS infrastructure occurred between December 2 and December 18, 2025. The incident exposed protected health information, including names, Social Security numbers, dates of birth, and driver's license numbers, affecting 23 New Hampshire residents. Aesto engaged forensic specialists, contained the breach, and provided credit monitoring services to affected individuals. Shenandoah notified the New Hampshire Attorney General on August 11, 2026.

Aesto LLC, on behalf of Shenandoah Valley Medical System, Inc. (d/b/a Shenandoah Community Health), issued a data breach notification in Nebraska. The incident involved the unauthorized access to minor's information, including government identifiers (SSN, DOB) and basic identity data. The organization provided free credit monitoring and fraud assistance via Cyberscout (TransUnion) and established a toll-free response line. The specific attack vector and discovery date are not detailed in the notification letter.